# Redhat Enterprise Linux vulnerabilities

Source: https://junglewise.ai/threats/technologies/enterprise-linux  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/enterprise-linux.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 50 vulnerabilities in Redhat Enterprise Linux: 0 in the last 7 days and 1 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-78475, was published on 24 August 2026. Nothing was published in the last eight weeks.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 1
- All time: 50 (1 critical, 0 exploited in the wild)

## About Redhat Enterprise Linux

Red Hat's commercial Linux distribution designed for enterprise server and datacenter environments.

## Latest Redhat Enterprise Linux vulnerabilities

- [CVE-2026-78475: GIMP file-pix plugin stack overflow in PIX image processing](https://junglewise.ai/threats/cve-2026-78475-gimp-file-pix-plugin-stack-overflow-in-pix-image-processing) (medium, CVSS 6.1, published 24 Aug 2026)
- [CVE-2026-58224: A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of…](https://junglewise.ai/threats/cve-2026-58224-a-flaw-was-found-in-samba-s-ctdb-the-clustered-database-service) (medium, CVSS 6.5, published 14 Aug 2026)
- [CVE-2026-73585: A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a…](https://junglewise.ai/threats/cve-2026-73585-a-flaw-was-found-in-sblim-cmpi-base-insecure-temporary-file) (medium, CVSS 6.3, published 13 Aug 2026)
- [CVE-2026-73584: A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged…](https://junglewise.ai/threats/cve-2026-73584-a-flaw-was-found-in-sblim-sfcb-a-local-low-privileged-attacker) (medium, CVSS 6.3, published 13 Aug 2026)
- [CVE-2026-73583: A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization…](https://junglewise.ai/threats/cve-2026-73583-a-flaw-was-found-in-sblim-sfcb-a-local-attacker-with-access-to) (medium, CVSS 6.6, published 13 Aug 2026)
- [CVE-2026-18728: A flaw was found in open-iscsi. An integer underflow vulnerability in the `iscsiuio` component, specifically during…](https://junglewise.ai/threats/cve-2026-18728-a-flaw-was-found-in-open-iscsi-an-integer-underflow-vulnerability) (medium, CVSS 6.5, published 13 Aug 2026)
- [CVE-2026-59091: A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit…](https://junglewise.ai/threats/cve-2026-59091-a-flaw-was-found-in-gimp-s-file-format-plugins-including-those) (high, CVSS 7.3, published 10 Aug 2026)
- [CVE-2026-71227: A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output…](https://junglewise.ai/threats/cve-2026-71227-a-flaw-was-found-in-libkcapi-a-local-attacker-can-influence-an) (medium, CVSS 5.1, published 5 Aug 2026)
- [CVE-2026-71226: Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all…](https://junglewise.ai/threats/cve-2026-71226-memory-corruption-via-uncanceled-aio-requests-on-error-libkcapi-s) (high, CVSS 7.3, published 5 Aug 2026)
- [CVE-2026-71225: A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in…](https://junglewise.ai/threats/cve-2026-71225-a-flaw-was-found-in-libkcapi-when-performing-one-shot-symmetric) (medium, CVSS 6.5, published 5 Aug 2026)
- [CVE-2026-18477: A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local…](https://junglewise.ai/threats/cve-2026-18477-a-toctou-time-of-check-time-of-use-vulnerability-in-gnu-tar-s) (medium, CVSS 4.4, published 3 Aug 2026)
- [CVE-2026-18651: A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind…](https://junglewise.ai/threats/cve-2026-18651-a-flaw-was-found-in-389-directory-server-during-sasl-plain) (medium, CVSS 5.4, published 3 Aug 2026)
- [CVE-2026-18508: A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not…](https://junglewise.ai/threats/cve-2026-18508-a-flaw-was-found-in-gnu-tar-when-extracting-an-archive-with-the) (medium, CVSS 4.4, published 3 Aug 2026)
- [CVE-2026-68742: A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the…](https://junglewise.ai/threats/cve-2026-68742-a-flaw-was-found-in-sssd-the-sss-nss-protocol-parse-addr-function) (medium, CVSS 5.5, published 3 Aug 2026)
- [CVE-2026-6695: A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA…](https://junglewise.ai/threats/cve-2026-6695-a-flaw-was-found-in-gimp-a-remote-attacker-could-exploit-this-by) (medium, CVSS 5.5, published 3 Aug 2026)
- [CVE-2026-6694: A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated…](https://junglewise.ai/threats/cve-2026-6694-a-flaw-was-found-in-gimp-s-file-png-plugin-a-remote-attacker-can) (medium, CVSS 5.5, published 3 Aug 2026)
- [CVE-2026-8863: Multiple Vendors UEFI SHIM Secure Boot bypass via SBAT validation failure](https://junglewise.ai/threats/cve-2026-8863-multiple-vendors-uefi-shim-secure-boot-bypass-via-sbat-validation) (info, CVSS 0, published 9 Jun 2026)
- [CVE-2026-2708: A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The…](https://junglewise.ai/threats/cve-2026-2708-a-request-smuggling-vulnerability-exists-in-libsoup-s-http-1) (low, CVSS 3.7, published 23 Apr 2026)
- [CVE-2026-40919: A flaw was found in GIMP. This vulnerability, a buffer overflow in the `file-seattle-filmworks` plugin, can be…](https://junglewise.ai/threats/cve-2026-40919-a-flaw-was-found-in-gimp-this-vulnerability-a-buffer-overflow-in) (medium, CVSS 6.1, published 15 Apr 2026)
- [CVE-2026-40918: A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of…](https://junglewise.ai/threats/cve-2026-40918-a-flaw-was-found-in-gimp-processing-a-specially-crafted-pvr-image) (medium, CVSS 5.5, published 15 Apr 2026)
- [CVE-2026-40917: A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function, occurs when…](https://junglewise.ai/threats/cve-2026-40917-a-flaw-was-found-in-gimp-this-vulnerability-a-heap-buffer-over) (medium, CVSS 5, published 15 Apr 2026)
- [CVE-2026-40916: A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a…](https://junglewise.ai/threats/cve-2026-40916-a-flaw-was-found-in-gimp-a-stack-buffer-overflow-vulnerability-in) (medium, CVSS 5, published 15 Apr 2026)
- [CVE-2026-40915: A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader…](https://junglewise.ai/threats/cve-2026-40915-a-flaw-was-found-in-gimp-a-remote-attacker-could-exploit-an) (medium, CVSS 5.5, published 15 Apr 2026)
- [CVE-2026-6245: A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the…](https://junglewise.ai/threats/cve-2026-6245-a-flaw-was-found-in-the-system-security-services-daemon-sssd-the) (medium, CVSS 5.5, published 15 Apr 2026)
- [CVE-2026-5745: A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically…](https://junglewise.ai/threats/cve-2026-5745-a-flaw-was-found-in-libarchive-a-null-pointer-dereference) (medium, CVSS 5.5, published 7 Apr 2026)

## Most severe Redhat Enterprise Linux vulnerabilities

- [CVE-2026-1709: Keylime authentication bypass in registrar component](https://junglewise.ai/threats/cve-2026-1709-keylime-authentication-bypass-in-registrar-component) (critical, CVSS 9.4, published 6 Feb 2026)
- [CVE-2026-59091: A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit…](https://junglewise.ai/threats/cve-2026-59091-a-flaw-was-found-in-gimp-s-file-format-plugins-including-those) (high, CVSS 7.3, published 10 Aug 2026)
- [CVE-2026-71226: Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all…](https://junglewise.ai/threats/cve-2026-71226-memory-corruption-via-uncanceled-aio-requests-on-error-libkcapi-s) (high, CVSS 7.3, published 5 Aug 2026)
- [CVE-2026-26103: udisks missing authorization in LUKS header restoration API](https://junglewise.ai/threats/cve-2026-26103-udisks-missing-authorization-in-luks-header-restoration-api) (high, CVSS 7.1, published 25 Feb 2026)
- [CVE-2025-9908: A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This…](https://junglewise.ai/threats/cve-2025-9908-a-flaw-was-found-in-the-red-hat-ansible-automation-platform-event) (medium, CVSS 6.7, published 27 Feb 2026)
- [CVE-2025-9909: A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability…](https://junglewise.ai/threats/cve-2025-9909-a-flaw-was-found-in-the-red-hat-ansible-automation-platform) (medium, CVSS 6.7, published 27 Feb 2026)
- [CVE-2025-9907: A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This…](https://junglewise.ai/threats/cve-2025-9907-a-flaw-was-found-in-the-red-hat-ansible-automation-platform-event) (medium, CVSS 6.7, published 27 Feb 2026)
- [CVE-2026-5165: A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset…](https://junglewise.ai/threats/cve-2026-5165-a-flaw-was-found-in-virtio-win-specifically-within-the-virtio) (medium, CVSS 6.7, published 30 Mar 2026)
- [CVE-2026-5164: A flaw was found in virtio-win. The `RhelDoUnMap()` function does not properly validate the number of descriptors…](https://junglewise.ai/threats/cve-2026-5164-a-flaw-was-found-in-virtio-win-the-rheldounmap-function-does-not) (medium, CVSS 6.7, published 30 Mar 2026)
- [CVE-2026-73583: A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization…](https://junglewise.ai/threats/cve-2026-73583-a-flaw-was-found-in-sblim-sfcb-a-local-attacker-with-access-to) (medium, CVSS 6.6, published 13 Aug 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 1 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Redhat technologies

- [Redhat Linux](https://junglewise.ai/threats/technologies/linux): 11 vulnerabilities
- [Redhat Openshift Container Platform](https://junglewise.ai/threats/technologies/openshift-container-platform): 10 vulnerabilities
- [Redhat 389 Directory Server](https://junglewise.ai/threats/technologies/389-directory-server): 9 vulnerabilities
- [Redhat Hardened Images](https://junglewise.ai/threats/technologies/hardened-images): 8 vulnerabilities
- [Redhat Quay](https://junglewise.ai/threats/technologies/quay): 8 vulnerabilities
- [Redhat Advanced Cluster Management For Kubernetes](https://junglewise.ai/threats/technologies/advanced-cluster-management-for-kubernetes): 7 vulnerabilities
- [Redhat Ansible Automation Platform](https://junglewise.ai/threats/technologies/ansible-automation-platform): 4 vulnerabilities
- [Redhat Insights-Client](https://junglewise.ai/threats/technologies/insights-client): 4 vulnerabilities
- [Redhat Ansible Developer](https://junglewise.ai/threats/technologies/ansible-developer): 3 vulnerabilities
- [Redhat Ansible Inside](https://junglewise.ai/threats/technologies/ansible-inside): 3 vulnerabilities
- [Redhat Enterprise Linux Desktop](https://junglewise.ai/threats/technologies/enterprise-linux-desktop): 3 vulnerabilities
- [Redhat Enterprise Linux Hpc Node](https://junglewise.ai/threats/technologies/enterprise-linux-hpc-node): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Redhat Enterprise Linux vulnerabilities", https://junglewise.ai/threats/technologies/enterprise-linux, 13 November 2026.